$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/XZRExVaDzcFgsrYbOSuB3O_NzcA.roa File: XZRExVaDzcFgsrYbOSuB3O_NzcA.roa (raw, json) Hash identifier: 5NWV4WvGROZfGDkNGsTX3fmZ6r2hOHlz65pXels/S14= Subject key identifier: 5D:94:44:C5:56:83:CD:C1:60:B2:B6:1B:39:2B:81:DC:EF:CD:CD:C0 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0370 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XZRExVaDzcFgsrYbOSuB3O_NzcA.roa Signing time: Thu 01 May 2025 01:33:27 +0000 ROA not before: Thu 01 May 2025 01:33:27 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 27.133.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 880 (0x370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:33:27 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=5D9444C55683CDC160B2B61B392B81DCEFCDCDC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:f3:36:8c:37:a8:31:6c:eb:1b:87:e6:c8: 8a:cf:59:58:c8:b2:46:20:0d:83:17:97:40:e2:ca: 84:9b:db:da:17:d9:c4:6e:3f:2b:c2:5d:ef:8b:c3: 12:14:43:9f:f7:ae:b2:21:05:3b:82:e2:12:3a:65: 39:75:7e:6c:38:1f:cc:24:ed:15:7a:46:83:15:1d: c3:48:47:ec:2f:08:eb:a4:e1:1b:e8:9f:e4:db:6b: 23:91:af:5f:b7:2b:7c:bd:0b:95:26:06:d0:95:21: 38:c6:6b:ca:2d:22:5e:10:bd:c3:0a:d8:5c:63:d1: f3:24:f1:22:74:9a:14:82:69:da:9d:71:3a:0b:28: 0a:58:c9:54:83:f3:62:6d:4e:94:ec:82:b9:2a:61: b8:87:95:e1:02:70:29:45:61:6f:bb:34:80:6d:9e: 76:d5:3e:2b:55:53:12:10:6b:48:5e:8d:db:de:19: 7e:49:75:ca:35:3c:96:24:37:69:e2:57:3b:f5:c3: 06:99:32:fa:84:eb:34:65:ae:c7:b1:00:62:0b:55: 73:86:63:77:58:a8:33:0e:8f:d2:18:00:f8:f0:ce: e5:03:ee:bc:d6:4c:47:1b:24:9a:c3:b2:a6:60:08: 6f:1e:74:20:33:f1:e8:9c:db:74:bd:74:55:e6:54: 23:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:94:44:C5:56:83:CD:C1:60:B2:B6:1B:39:2B:81:DC:EF:CD:CD:C0 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XZRExVaDzcFgsrYbOSuB3O_NzcA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.133.90.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:e0:ab:45:b2:e7:d1:a0:f1:1e:d6:1c:be:5b:77:4d:e9:ff: 17:91:73:19:ab:c5:46:c0:75:d4:37:74:bf:d8:8c:d8:44:d5: 11:c8:d4:1c:dc:7c:36:bc:8b:f6:d8:10:41:99:f9:0f:13:2e: e3:b3:b4:8e:d3:ba:e2:2b:51:a0:d3:04:a0:c3:30:cd:f1:c0: e6:2b:e5:20:5d:9c:31:ab:25:fe:8e:37:08:7a:ed:7f:80:61: 66:aa:a1:63:26:fd:c1:18:5d:35:11:ca:36:80:b3:40:b5:47: 2e:0d:7f:2a:14:05:33:0a:59:47:6c:d7:33:3a:fc:3f:1e:71: 88:ee:72:e7:e8:95:2e:f0:43:18:44:dd:b5:68:07:31:7b:08: 99:50:8e:e9:8a:a0:c5:ad:fb:e8:d6:57:db:f1:5b:f8:d2:84: d2:7a:93:43:e5:5c:60:c6:31:c5:1c:7a:fe:ff:a5:8d:c7:92: 65:1b:94:64:25:a4:f0:b6:12:bf:49:2a:34:3c:08:48:4e:21: 40:8c:e8:9e:68:60:ca:43:13:fd:cf:28:56:c4:e8:af:de:72: 14:61:7e:08:f6:de:45:dd:aa:eb:dd:b5:11:99:5a:80:a3:54: 37:3c:6f:20:1c:bd:f0:51:c8:72:89:15:c5:be:8b:d3:d0:b6: f4:ec:90:10 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTMzMjdaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVEOTQ0NEM1NTY4M0NE QzE2MEIyQjYxQjM5MkI4MURDRUZDRENEQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5D/M2jDeoMWzrG4fmyIrPWVjIskYgDYMXl0DiyoSb29oX2cRu PyvCXe+LwxIUQ5/3rrIhBTuC4hI6ZTl1fmw4H8wk7RV6RoMVHcNIR+wvCOuk4Rvo n+TbayORr1+3K3y9C5UmBtCVITjGa8otIl4QvcMK2Fxj0fMk8SJ0mhSCadqdcToL KApYyVSD82JtTpTsgrkqYbiHleECcClFYW+7NIBtnnbVPitVUxIQa0hejdveGX5J dco1PJYkN2niVzv1wwaZMvqE6zRlrsexAGILVXOGY3dYqDMOj9IYAPjwzuUD7rzW TEcbJJrDsqZgCG8edCAz8eic23S9dFXmVCNtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXZRExVaDzcFgsrYbOSuB3O/NzcAwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1haUkV4VmFEemNGZ3NyWWJPU3VCM09fTnpjQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEbhVowDQYJKoZIhvcNAQELBQADggEBAD/gq0Wy59Gg8R7WHL5bd03p/xeR cxmrxUbAddQ3dL/YjNhE1RHI1BzcfDa8i/bYEEGZ+Q8TLuOztI7TuuIrUaDTBKDD MM3xwOYr5SBdnDGrJf6ONwh67X+AYWaqoWMm/cEYXTURyjaAs0C1Ry4NfyoUBTMK WUds1zM6/D8ecYjucufolS7wQxhE3bVoBzF7CJlQjumKoMWt++jWV9vxW/jShNJ6 k0PlXGDGMcUcev7/pY3HkmUblGQlpPC2Er9JKjQ8CEhOIUCM6J5oYMpDE/3PKFbE 6K/echRhfgj23kXdquvdtRGZWoCjVDc8byAcvfBRyHKJFcW+i9PQtvTskBA= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:47 2025 by rpki-client